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Intellectual Property Rights 



IPRs essential or potentially essential to the present document may have been declared to ETSI. The information 
pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found 
in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in 
respect of ETSI standards" , which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web 
server ( http://ipr.etsi.org ). 

Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee 
can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web 
server) which are, or may be, or may become, essential to the present document. 



Foreword 



This Technical Specification (TS) has been produced by ETSI Technical Committee Intelligent Transport Systems 
(ITS). 

The present document is part 3 of a multi-part deliverable covering Conformance test specification for ITS Security as 
identified below: 

TS 103 096-1: "Protocol Implementation Conformance Statement (PICS)"; 

TS 103 096-2: "Test Suite Structure and Test Purposes (TSS&TP)"; 

TS 103 096-3: "Abstract Test Suite (ATS) and Protocol Implementation eXtra Information for Testing 
(PIXIT)"; 

TR 103 096-4: "VaHdation report". 
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Scope 



The present document provides parts of the Abstract Test Suite (ATS) for Security as defined in IEEE 1609.2 [1], 
TS 102 941 [2] and in TS 102 867 [3] in compliance with the relevant requirements and in accordance with the relevant 
guidance given in ISO/IEC 9646-7 [8]. The TTCN modules and PIXIT declarations are not defined in the present 
document and will be added in a later revision. 

The ISO standard for the methodology of conformance testing (ISO/lEC 9646-1 [5] and ISO/lEC 9646-2 [6]) as well as 
the ETSI rules for conformance testing (ETS 300 406 [9]) are used as a basis for the test methodology. 



2 References 

References are either specific (identified by date of publication and/or edition number or version number) or 
non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the 
reference document (including any amendments) applies. 

Referenced documents which are not found to be publicly available in the expected location might be found at 
http://docbox.etsi.org/Reference . 

NOTE: While any hyperlinks included in this clause were valid at the time of publication ETSI cannot guarantee 
their long term validity. 

2.1 Normative references 

The following referenced documents are necessary for the application of the present document. 

[I] IEEE P1609.2/D12 (Januai-y 2012): "IEEE Draft Standard for Wireless Access in Vehicular 
Environments - Security Services for Applications and Management Messages". 

[2] ETSI TS 102 941: "Intelligent Transport Systems (ITS); Security; Trust and Privacy 

Management". 

[3] ETSI TS 102 867: "Intelligent Transport Systems (ITS); Security; Stage 3 mapping for 

IEEE 1609.2". 

[4] ETSI TS 103 096-1: Conformance test specification for Security Test requirements and Protocol 

Implementation Conformance Statement (PICS) proforma. 

[5] ISO/IEC 9646-1 (1994): "Information technology — Open Systems Interconnection — 

Conformance testing methodology and framework - Part 1: General concepts". 

[6] ISO/IEC 9646-2 (1994): "Information technology — Open Systems Interconnection — 

Conformance testing methodology and framework — Part 2: Abstract Test Suite specification". 

[7] ISO/IEC 9646-6 (1994): "Information technology — Open Systems Interconnection — 

Conformance testing methodology and framework — Part 6: Protocol profile test specification". 

[8] ISO/IEC 9646-7 (1995): "Information technology — Open Systems Interconnection — 

Conformance testing methodology and framework — Part 7: Implementation Conformance 

Statements". 

[9] ETSI ETS 300 406 (1995): "Methods for testing and Specification (MTS); Protocol and profile 

conformance testing specifications; Standardization methodology". 

[10] FIPS PUB 186-3: "Digital Signature Standard (DSS)". 

[II] SEC 1: "Elliptic Curve Cryptography". 
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2.2 Informative references 



The following referenced documents are not necessary for the application of the present document but they assist the 
user with regard to a particular subject area. 

[i.l] ETSI EG 202 798: "Intelligent Transport Systems (ITS); Testing; Framework for conformance and 

interoperability testing". 



Definitions and abbreviations 



3.1 Definitions 

For the purposes of the present document, the terms given in IEEE 1609.2 [1] TS 102 941 [2], TS 102 867 [3], 
ISO/IEC 9646-6 [7] and ISO/IEC 9646-7 [8] apply. 

3.2 Abbreviations 

For the purposes of the present document, the following abbreviations apply: 

AA Authorization Authority 

ASP Abstract Service Primitive 

ATM Abstract Test Method 

ATS Abstract Test Suite 

CA Certification Authority 

EA Enrolment Authority 

EB Exceptional behaviour 

ITS Intelligent Transport System 

ITS-S ITS Station 

lUT Implementation Under Test 

LDM Local Dynamic Map 

MTC Main Test Component 

PCTR Protocol Conformance Test Report 

PSID Provider Service Identifier 

SAP Service Access Point 

SCS System Conformance Statement 

SCTR Static Conformance Test Report 

SUT System Under Test 

TP Test Purposes 

TSS Test Suite Structure 

TTCN Testing and Test Control Notation 



4 Abstract Test IVIethod 

This clause describes the ATM used to test the ITS-Security framework. 



4.1 Abstract protocol tester 



The abstract protocol tester used by the ITS-Security test suite is described in figure 1 . The test system will simulate 
valid and invalid protocol behaviour, and will analyze the reaction of the lUT. 
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Test System 



ITS 
Security 



Transport 
layers 



Lower tester 



IEEE :i 609.2 FDUs 



SUT 



fr UpperTester 



lUT 



Transport 
layers 



Figure 1 : Abstract protocol tester - Security 



4.2 Test Configuration 



This test suite uses four test configurations in order to cover the different test scenarios. In these configurations, the 
tester simulates one or several ITS station implementing the ITS Security framework. 



4.2.1 Test configuration CF01 



((?)) 



ITS-S 



AA 



((|)) 

lUT (=EA) 
CF01 

Figure 2: Test Configuration 1 



4.2.2 Test configuration CF02 



((?)) 



ITS-S 



I 

EA 



lUT (=AA) 
CF02 

Figure 3: Test Configuration 2 
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4.2.3 Test configuration CF03 

((f)) 






IUT(=ITS-S) 
CF03 

Figure 4: Test Configuration 3 

4.2.4 Test configuration CF04 



M (W 




lUT (=ITS-S) 
CF04 

Figure 5: Test Configuration 4 

4.3 Test architecture 

The present document implements the general TTCN-3 test architecture described in EG 202 798 [i.l], clauses 6.3.2 
and 8.3.1. 

Figure 6 shows the TTCN-3 test architecture used for the ITS -Security ATS. In single-component testcases 
(configuration CF04), the MTC is of type ItsSec and communicates with the lUT over securityPort. In multi-component 
testcases (configuration CFOl, CF02 and CF03), the MTC is of type ItsMtc and is used to synchronize the different 
PTCs. The PTCs are implemented using ItsSec components and communicate with the lUT over securityPort. Port 
securityPort is used to exchange IEEE 1609.2 [1] protocol messages between the Security test components and the lUT. 

The Upper tester entity in the SUT enables triggering Security related functionalities by simulating primitives from 
application or LDM entities. It is required to trigger the ITS-Security layer in the SUT to send facility messages, which 
are resulting from upper layer primitives. Furthermore, receiving secured messages may result in the ITS-Security layer 
sending primitives to the appropriate facility layer. 
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Figure 6: test system architecture 



4.4 



Ports and ASPs 



Two ports are used by the ITS-Security ATS: 

• The securityPort, of type SecurityPort 

• The utPort of type UpperTesterPort 

4.4.1 Primitives of tine securityPort 

Two types of primitives are used in the securityPort: 

• The ieeel609Dot2Ind primitive used to receive messages of type Ieeel609Dot2Message. 

• The ieeel609Dot2Req primitive used to send messages of type Ieeel609Dot2Message. 

4.4.2 Primitives of tine utPort 

This port uses three types of primitives: 

• The Utinitialize primitive used to initiahse lUT 

• The UtConfigure primitive used to configure specific options in lUT 

• The UtTrigger primitive used trigger actions in lUT 

• The UtStatus primitive used to retrieve status information from lUT 
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Table 1 lists all configuration options that the Test system should be able to modify in lUT for correct test execution. 

Table 1 : lUT configuration options 



Configuration options 



use certificate chain 



use explicit_certificates 



use a self-signed enrolment request 



use start_validity flag and not a lifetime_is_duration 



use use_start_validity and lifetime_is_duration 



use sec data exch identified localized 



use signature of form x_coordinate_only (use of FIPS 186-3 specification [10]) 
use compressed public keys in signature (SEC 1 specification [11]) 



use uncompressed public keys in signature 



include generation time when signing a message 



include expiry_time when signing a message 



include generation Jocation when signing a message 



use ecdsa_nistp256_with_sha256 as PKAIgorithm when signing a message 
put certificate in each of the signed messages 



Table 2 summarizes the actions that the Test System may require the lUT to perform via UtTrigger primitive. 

Table 2: Actions triggered in lUT 



Actions 



send an EnrolmentRequest message 



send an EnrolmentRequest message with more than 8 PSID records 



send an AuthorizationRequest message 



send a signed message 



send a signed message with partial data 



send a signed message with external data 



send multiple signed message 



Status codes returned by lUT via UtStatus primitive upon receipt of a IEEE 1609.2 [1] message are listed in table 3. 

Table 3: lUT status codes 



Status codes 



ACCEPTED 



DISCARDED 



REJ INVALID REGION 



REJ INVALID VALIDITY PERIOD 



REJ INVALID PERIVIISSIONS 



REJ UNSUPPORTED SIGNER TYPE 



REJ INVALID EXPIRATION 



REJ DUPLICATED PERMISSIONS 



REJ FORBIDDEN SUBJECT TYPE 



REJ FORBIDDEN CF 



REJ FORBIDDEN PERIVIISSIONS 



REJ FORBIDDEN ACK 



REJ INVALID REQUESTED HASH 



REJ EXPIRED DATA 



REJ IRRELEVANT REGION 



REJ REVOKED CERTIFICATE 



REJ UNAUTHORIZED REGION 



REJ UNAUTHORIZED AID 



REJ INVALID CERTIFICATE CHAIN 



REJ INVALID SIGNATURE 



REJ UNSUPPORTED IVISG TYPE 
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External functions 



The external functions described in table 4 have been defined in order to perform cryptographic operations and handle 
complex computations. 

Table 4: External functions 



Function 


Parameters 


Return 


Dir. 


Name 


Type 


Value 


Type 


xfgenerateKeyPair 


out 


p publicKey 


octetstring 


Status code 


enumerated 


out 


p privateKey 


octetstring 


in 


p algorithm 


enumerated 


xf_computeSignature 


out 


p signature 


octetstring 


Status code 


enumerated 


in 


p signingKey 


octetstring 


in 


p algorithm 


octetstring 


in 


p data 


octetstring 


xf_encryptData 


out 


p encrypted Data 


octetstring 


Status code 


enumerated 


in 


p encryptionKey 


octetstring 


in 


p algorithm 


enumerated 


in 


p_data 


octetstring 


xf generateKey 


in 


p algorithm 


enumerated 


Random Key 


octetstring 


xf_computeHash 


in 


p algorithm 


enumerated 


Hash 


octetstring 


in 


p_data 


octetstring 


xf_verifySignature 


in 


p signature 


octetstring 


Status code 


enumerated 


in 


p verificationKey 


octetstring 


in 


p algorithm 


enumerated 


in 


p data 


octetstring 


xfdecryptData 


out 


p data 


octetstring 


Status code 


enumerated 


in 


p decryptionKey 


octetstring 


in 


p algorithm 


enumerated 


in 


p_encryptedData 


octetstring 


xf_verifyGeographicAreas 


in 


p containingArea 


GeoArea 


Is p_containedArea 

contained in 

p containingArea 


boolean 


in 


p_containedArea 


GeoArea 





Validity of signed communication 



This clause defines the list of actions to be performed by the test system in order to ensure the validity of signed 
communication. 

If possible, every step is handled within TTCN-3, except cryptographical computations. When a cryptographic al 
computation is used, then the name for the external function is provided (e.g. xf_verifySignature). When sending data, 
TTCN-3 templates used to prepare the messages are expected to be consistent (signer identifier, certificate chain, 
types, etc.). 



6.1 Generating signed data 



The test system ensures validity of signed communication by implementing the procedures as described below. This is 
compliant with IEEE 1609.2 [1], clause 7.2.13. 

Inputs: 

• private key to be used to sign; 

• elliptic curve point format to be used. 

NOTE: The certificate is assumed to be consistent with the private key and with the options used to fill in the 
header fields in the signed data. 
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Steps: 

a) Set all elliptic curve points according to elliptic curve point format 

b) Compute hash of encoded data using xf _computeHash ( ) 

c) Sign the computed hash using xf _computeSignature ( ) 

6.2 Receiving signed data 

The test system ensures validity of signed communication by implementing the procedures as described below. This is 
compliant with IEEE 1609.2 [1], clause 7.2.19. 

Inputs: 

• The received secured message. 
Steps: 

a) Check the internal consistency of the certificate chain: 

1) Signatures using xf_computeHash ( ) , xf_verif ySignature ( ) 

2) Permissions using supersets and matching mechanisms 

3) Geographic scopes using xf_verif yGeographicAreas ( ) 

b) Check the consistency of the certificate chain with the data. The signed communication may be rejected for 
any of the following reasons: 

1) "future certificate at generation time" 

2) "expired certificate at generation time" 

3) "expiry date too early" 

4) "expiry date too late" 

5) "signature generated outside certificate validity region" (using xf_verif yGeographicAreas ( ) ) 

6) "unauthorized PSID" (using supersets and matching mechanisms) 

7) "PSIDs don't match" 

8) "unauthorized certificate type" 

c) Verify the signature: 

1) Compute hash of the data using xf _computeHash { ) 

2) Verify the signature using xf_verifySignature { ) 

6.3 Generating enrolment/authorization request 

The test system ensures validity of signed communication by implementing the procedures as described below. This is 
compliant with IEEE 1609.2 [1], clause 7.2.23. 

Inputs: 

• Private key used to sign the certificate request; 

• elliptic curve point format to be used. 

NOTE: If the request is signed with a certificate, the certificate is assumed to be consistent with the private key 
and with the options used to fill in the request. 
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Steps: 

a) Set all elliptic curve points according to elliptic curve point format. 

b) Encode ToBeSignedCertificateRequest sub-structure and sign it with private key using 

xf_computeSignature { ) . 

c) Compute the SHA_256 hash of the certificate request using xf _computeHash ( ) and set the RequestHash 
field to the ten least significant bytes of the computed value. 

d) Encrypt the certificate request using CA certificate as recipient. 

6.4 Receiving enrolment/authorization request 

The test system ensures validity of signed communication by implementing the procedures as described below. This is 
compliant with IEEE 1609.2 [1]. 

Inputs: 

• Received certificate signing request 

Steps: 

a) Build certificate chain based on certificate information contained in the message. 

b) Check the internal consistency of the certificate chain: 

1) Certificate chain has to link to a trusted certificate or be a self-signed certificate 

2) Signatures using xf_computeHash ( ) , xf_verif ySignature ( ) 

3) Permissions using supersets and matching mechanisms 

4) Geographic scopes using xf_verif yGeographicAreas ( ) 

c) Check the consistency of the certificate chain with the request: 

1) "future certificate at request time" 

2) "expired certificate at request time" 

3) "expiry date too early" 

4) "expiry date too late" 

5) "requested validity region outside signing certificate validity region" (using 

xf_verif yGeographicAreas ( ) ) 

6) "unauthorized PSID" (using supersets and matching mechanisms) 

7) "PSIDs don't match" 

8) "unauthorized certificate type" 

d) Verify the signature: 

1) Compute hash of the data using xf _computeHash { ) 

2) Verify the signature using xf_verifySignature ( ) 
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6.5 Generating enrolment/authorization response 

The test system ensures validity of signed communication by implementing the procedures as described below. This is 
compliant with IEEE 1609.2 [1]. 

Inputs: 

• Private key used to sign the certificate 

• Data from the request, including certificate fields and response encryption key 

NOTE: The CA certificate is assumed to be consistent with the private key and with the options requested by the 
certificate requester. 

Steps: 

a) Encode ToBeSignedCertificate sub-structure and sign it with private key using xf_computeSignature ( ) 

b) Encrypt the certificate response 

6.6 Receiving enrolment/authorization response 

The test system ensures validity of signed communication by implementing the procedures as described below. This is 
compHant with IEEE 1609.2 [1], clause 7.2.25. 

a) Decrypt EncryptedData 

b) Check the internal consistency of the certificate chain: 

1) Signatures using xf_verif ySignature ( ) 

2) Permissions using supersets and matching mechanisms 

3) Geographic scopes using xf_verif yGeographicAreas ( ) 

6.7 Data encryption 

This is compliant with IEEE 1609.2 [1], clause 7.2.15. 
Inputs: 

• The message to be encrypted; 

• Certificates of all the recipients of the message; 

• Symmetric algorithm to be used for encryption. 
Steps: 

a) For each recipient: 

1) Extract the encryption key from the certificate. 

b) Generate a random key k for the symmetric encryption algorithm using xf _generateKey ( ) 

c) For each recipient: 

1) Extract the public encryption key from the certificate. 

2) Encrypt k with the public encryption key using xf _encryptData ( ) , as a 
EciesNistP256EncryptedKey. 

3) Store the result in the current Recipientlnfo sub-structure 
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d) Encrypt the ToBeEncrypted sub-structure using the symmetric encryption algorithm and the key k: 

1) Generate a nonce N of length 12 octets; 

2) Encrypt the data with AES-CCM with inputs nonce N and plaintext ToBeEncrypted sub-structure using 
xf _encryptData ( ) as an AesCcmCiphertext 

6.8 Data decryption 

This is compliant with IEEE 1609.2 [1], clause 7.8.8. 
Inputs: 

• Received encrypted message; 

• Private key associated to the recipient certificate. 

a) Select the relevant Recipientlnfo sub-structure in the message 

b) Decrypt encrypted symmetric key with the associated asymmetric decryption algorithm using 

xf_decryptData { ) 

c) Decrypt ciphertext using the extracted symmetric key (AES-CCM) using xf _decryptData ( ) 



ATS conventions 



The ATS conventions are intended to give a better understanding of the ATS but they also describe the conventions 
made for the development of the ATS. These conventions shall be considered during any later maintenance or further 
development of the ATS. 

The ATS conventions contain two clauses, the testing conventions and the naming conventions. The testing conventions 
describe the functional structure of the ATS. The naming conventions describe the structure of the naming of all ATS 
elements. 

To define the ATS, the guidelines of the document ETS 300 406 [9] were considered. 

7.1 Testing conventions 

7.1.1 Testing states 

7.1.1.1 Initial states 

7.1.1.1.1 ITS-S send-side states 

Depending on preconditions defined in the corresponding test purpose, each testcase starts with one of the following 
preamble functions to bring lUT to the correct state: 

• f_prNotEnroled. ( ) : ITS-S has all info necessary to send an EnrolmentRequest but does not have any 
Enrolment credentials yet 

• f_prAwaitingEnrolmentResponse ( ) : ITS-S has sent an EnrolmentRequest and is waiting for an 
EnrolmentResponse 

• f_prEnroled { ) : ITS-S has received EnrolmentResponse and is able to send AuthorizationRequest 

• f_prAwaitingAuthorizationResponse { ) : ITS-S has sent an AuthorizationRequest and is waiting 
for an AuthorizationResponse 

• f_prAuthorised { ) : ITS-S has received a successful AuthorizationResponse 
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7.1.1.1.2 ITS-S receive-side states 



All test cases start with the function f_prOperational State { ) : ITS-S has the root certificate and is ready to 
receive messages. 

7.1.1.1.3 EA states 

All test cases start with the function f_prOperationalState { ) : EA has obtained its certificate and is ready to 
receive and send Enrolment messages. 

7.1.1.1.4 AA States 

All test cases start with the function f_prOperational State ( ) : AA has obtained its certificate and is ready to 
receive and send Authorization messages. 

7.1.1.2 Final state 

All test cases end with the function f_poDefault. This function brings the TUT back to operational state. As no specific 
actions are required for the idle state in the base standard, the function f_ poDefault does not invoke any action. 

As necessary, further actions may be included in the f_poDefault function. 

7.2 Naming conventions 

This test suite follows the naming convention guidelines provided in the EG 202 798 [i.l]. 

7.2.1 General guidelines 

The naming convention is based on the following underlying principles: 

• in most cases, identifiers should be prefixed with a short alphabetic string (specified in table 5) indicating the 
type of TTCN-3 element it represents; 

• suffixes should not be used except in those specific cases identified in table 7; 

• prefixes and suffixes should be separated from the body of the identifier with an underscore ("_"); 

EXAMPLE 1: c_sixteen, t_wait. 

• only module names, data type names and module parameters should begin with an upper-case letter. All other 
names (i.e. the part of the identifier following the prefix) should begin with a lower-case letter; 

• the start of second and subsequent words in an identifier should be indicated by capitalizing the first character. 
Underscores should not be used for this purpose. 

EXAMPLE 2: f_initialState. 

Table 5 specifies the naming guidelines for each element of the TTCN-3 language indicating the recommended prefix, 
suffixes (if any) and capitalization. 



£75/ 



18 



ETSI TS 103 096-3 VI. 1.1 (2013-07) 



Table 5: ETSI TTCN-3 generic naming conventions 



Language element 


Naming convention 


Prefix 


Example Identifier 


Module 


Use upper-case initial letter 


none 


IPv6Templates 


Group within a module 


Use lower-case initial letter 


none 


messageGroup 


Data type 


Use upper-case initial letter 


none 


SetupContents 


IVIessage template 


Use lower-case initial letter 


m 


m setuplnit 


IVIessage template with wildcard or matching 
expression 


Use lower-case initial letters 


mw_ 


mw_anyUserReply 


Modifying message template 


Use lower-case initial letter 


md 


md setuplnit 


Modifying message template with wildcard or 
matching expression 


Use lower-case initial letters 


mdw_ 


mdw_anyUserReply 


Signature template 


Use lower-case initial letter 


s 


s callSignature 


Port instance 


Use lower-case initial letter 


none 


signallingPort 


Test component instance 


Use lower-case initial letter 


none 


userTerminal 


Constant 


Use lower-case initial letter 


c 


c maxRetransmission 


Constant (defined within component type) 


Use lower-case initial letter 


cc 


cc minDuration 


External constant 


Use lower-case initial letter 


ex 


ex macid 


Function 


Use lower-case initial letter 


f 


f authenticationO 


External function 


Use lower-case initial letter 


fx 


fx calculateLengthO 


Altstep (incl. Default) 


Use lower-case initial letter 


a 


a receiveSetupO 


Test case 


Use ETSI numbering 


TC 


TC COR 0009 47 ND 


Variable (local) 


Use lower-case initial letter 


V 


V macId 


Variable (defined within a component type) 


Use lower-case initial letters 


vc 


vc systemName 


Timer (local) 


Use lower-case initial letter 


t 


t wait 


Timer (defined within a component) 


Use lower-case initial letters 


tc 


tc authMin 


Module parameters for PICS 


Use all upper case letters 


PICS 


PICS DOOROPEN 


Module parameters for other parameters 


Use all upper case letters 


PX 


PX TESTER STATION ID 


Formal Parameters 


Use lower-case initial letter 


P 


p macid 


Enumerated Values 


Use lower-case initial letter 


e 


e syncOk 



7.2.2 ITS specific TTCN-3 naming conventions 

Next to such general naming conventions, table 6 shows specific naming conventions that apply to the ITS TTCN-3 test 
suite. 

Table 6: ITS specific TTCN-3 naming conventions 



Language element 


Naming 
convention 


Prefix 


Example Identifier 


ITS Module 


Use upper-case 
initial letter 


lts"IUTname"_ 


ltsSecurity_ 


Module containing types and 
values 


Use upper-case 
initial letter 


lts"IUTname"_TypesAndValues 


ltsSecurity_TypesAndValues 


Module containing 
Templates 


Use upper-case 
initial letter 


lts"IUTname"_Templates 


ltsSecurity_Templates 


Module containing test cases 


Use upper-case 
initial letter 


Its" 1 UTname"_TestCases 


ltsSecurity_TestCases 


Module containing functions 


Use upper-case 
initial letter 


lts"IUTname"_Functions 


ltsSecurity_Functions 


Module containing external 
functions 


Use upper-case 
initial letter 


lts"IUTname"_ExternalFunctlons 


ltsSecurity_ExternalFunctions 


Module containing 
components, ports and 
message definitions 


Use upper-case 
initial letter 


lts"IUTname"_lnterface 


ltsSecurity_lnterface 


Module containing main 
component definitions 


Use upper-case 
initial letter 


lts"IUTname"_TestSystem 


ItsSecu rityTestSyste m 


Module containing the 
control part 


Use upper-case 
initial letter 


lts"IUTname"_TestControl 


ltsSecurity_TestControl 
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7.2.3 Usage of Log statements 



All TTCN-3 log statements use the following format using the same order: 

Three asterisks. 

The TTCN-3 test case or function identifier in which the log statement is defined. 

One of the categories of log: INFO, WARNING, ERROR, PASS, FAIL, INCONC, TIMEOUT. 

Free text. 

Three asterisks. 

EXAMPLE 1: 

log("*** TP_SEC_ITS-S_ENR_NB_0 6 : INFO: Preamble: Received and answered 
Enrolment Request ***"); 

Furthermore, the following rules are applied for the ITS-Security ATS: 

• Log statements are used in the body of the functions, so that invocation of functions are visible in the test logs. 

• All TTCN-3 setverdict statement are combined (as defined in TTCN-3 v3.4.1) with a log statement following 
the same above rules (see example below). 

EXAMPLE 2: 

setverdict (pass, "*** TP_SEC_ITS-S_ENR_NB_0 6 : PASS: Enrolment Response 
correctly accepted ***"),- 



7.2.4 Test Case (TC) identifier 

The table 7 shows the test case naming convention, which follows the same naming convention as the test purposes. 

Table 7: TC naming convention 



Identifier: 


TC_<root>_<gr>_<sgr> <x> <nn> 








<root> = root 


SEC 






<gr> = group 


CA 


Certificate Authorithy 






EA 


Enrolment Authorithy 






AA 


Authorization Authority 






ITS-S 


ITS Station 




<sgr> =sub-group 


ENR 


Enrolment 






AUTH 


Autorisation 






S-DATA 


Send Data 






R-DATA 


Receive Data 




<x> = type of testing 


NB 


Normal Behaviour 






EB 


Exceptional Behaviour 




<nn> = sequential number 




01 to 99 




<X> = Variant for 1^' permutation table 




AtoZ 




<Y> = Variant for 2"'^ permutation table 




AtoZ 



EXAMPLE: TP identifier: TP/SEC/ITS-S/ENR/NB-02 

TC identifier: TC_SEC_ITS-S_ENR_NB_02 
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7.3 



On line documentation 



Using the T3D tool enables providing on-line documentation browser in HTML, by tagging TTCN-3 comments. These 
tags are defined in table 8. 

Table 8: TTCN-3 comment tags 



Tag 


Description 


©author 


Specifies the names of the authors or an authoring organization which either has created or 
is maintaining a particular piece of TTCN-3 code. 


@desc 


Describes the purpose of a particular piece of TTCN-3 code. The description should be 
concise yet informative and describe the function and use of the construct. 


©remark 


Adds extra information, such as the highlighting of a particular feature or aspect not covered 
in the description. 


@see 


Refers to other TTCN-3 definitions in the same or another module. 


@return 


Provides additional information on the value returned by a given function. 


@param 


Documents the parameters of parameterized TTCN-3 definitions. 


©version 


States the version of a particular piece of TTCN-3 code. 



The HTML files result from the compilation of the TTCN-3 modules with the T3D tool. These HTML files are ready 
for browsing, and contain links enabling to navigate through the ATS. 

EXAMPLE: 

/** 

* Odesc Check that ITS-S generates valid enrolment request 

* with a different response_encryption_k;ey for every request 

* ©version 0.0.11 

* ©see Draft ETSI TS 103 096-2 TP/SEC/ITS-S/ENR/NB- 06 
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Annex A (informative): 
ATS in TTCN-3 



A.1 TTCN-3 files and other related modules 

Void 

A.2 HTML documentation of TTCN-3 files 

Void 
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Annex B (normative): 

Partial PIXIT proforma for Security 



Notwithstanding the provisions of the copyright clause related to the text of the present document, ETSI grants that 
users of the present document may freely reproduce the Partial PIXIT proforma in this annex so that it can be used for 
its intended purposes and may further publish the completed Partial PIXIT. 



The PIXIT Proforma is based on ISO/IEC 9646-6 [7]. Any needed additional information can be found in this 
international standard document. 



B.1 Identification summary 



Table B.I 



PIXIT Number: 




Test Laboratory Name: 




Date of Issue: 




Issued to: 





B.2 ATS summary 



Table B.2 



Protocol Specification: 


TS 102 941 


Protocol to be tested: 


Trust and Privacy IVIanagement 


ATS Specification: 


TS 1 03 096-3 


Abstract Test IVIethod: 


Clause 4 



B.3 Test laboratory 



Table B.3 



Test Laboratory Identification: 




Test Laboratory Manager: 




Means of Testing: 




SAP Address: 
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B.4 Client identification 



Table B.4 



Client Identification: 




Client Test manager: 




Test Facilities required: 





B.5 SUT 



Table B.5 



Name: 




Version: 




SCS Number: 




Machine configuration: 




Operating System Identification: 




lUT Identification: 




PICS Reference for lUT: 




Limitations of the SUT: 




Environmental Conditions: 





B.6 Protocol layer information 



B.6.1 Protocol identification 



Table B.6 



Name: 


TS 102 941 


Version: 




PICS References: 


TS 103 096-1 



B.6.2 lUT information 



Void 



£75/ 



24 



ETSI TS 103 096-3 V1.1.1 (2013-07) 



Annex C (normative): 
PCTR Proforma for Security 



Notwithstanding the provisions of the copyright clause related to the text of the present document, ETSI grants that 
users of the present document may freely reproduce the PCTR proforma in this annex so that it can be used for its 
intended purposes and may further publish the completed PCTR. 



The PCTR proforma is based on ISO/IEC 9646-6 [7]. Any needed additional information can be found in this 
International standard document. 



C.1 Identification summary 

C.1 .1 Protocol conformance test report 

Table C.1 



PCTR Number: 




PCTR Date: 




Corresponding SCTR Number: 




Corresponding SCTR Date: 




Test Laboratory Identification: 




Test Laboratory IVIanager: 




Signature: 





C.1. 2 lUT identification 



Table C.2 



Name: 




Version: 




Protocol specification: 




PICS: 




Previous PCTR if any: 





C.1. 3 Testing environment 



Table C.3 



PIXIT Number: 




ATS Specification: 




Abstract Test IVIethod: 




Means of Testing identification: 




Date of testing: 




Conformance Log reference(s): 




Retention Date for Log reference(s): 





£75/ 



25 ETSI TS 1 03 096-3 V1 .1 .1 (201 3-07) 

C.1 .4 Limits and reservation 

Additional information relevant to the technical contents or further use of the test report, or the rights and obligations of 
the test laboratory and the client, may be given here. Such information may include restriction on the publication of the 
report. 



C.1.5 Comments 

Additional comments may be given by either the client or the test laboratory on any of the contents of the PCTR, for 
example, to note disagreement between the two parties. 



C.2 lUT Conformance status 



This lUT has or has not been shown by conformance assessment to be non-conforming to the specified protocol 
specification. 

Strike the appropriate words in this sentence. If the PICS for this lUT is consistent with the static conformance 
requirements (as specified in clause C.3 in this report) and there are no "FAIL" verdicts to be recorded (in clause C.6 
in this report) strike the words "has or", otherwise strike the words "or has not". 



C.3 Static conformance summary 

The PICS for this lUT is or is not consistent with the static conformance requirements in the specified protocol. 
Strike the appropriate words in this sentence. 
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C.4 Dynamic conformance summary 

The test campaign did or did not reveal errors in the lUT. 

Strike the appropriate words in this sentence. If there are no "FAIL" verdicts to be recorded (in clause C.6 of this 
report) strike the words "did or" otherwise strike the words "or did not". 

Summary of the resuhs of groups of test: 



C.5 Static conformance review report 

If clause C.3 indicates non-conformance, this clause itemizes the mismatches between the PICS and the static 
conformance requirements of the specified protocol specification. 
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C.6 Test campaign report 



Table C.4: Test Cases 



ATS Reference 


Selected? 


Run? 


Verdict 


Observations 

(Reference to any observations 

made in clause C.7) 


TC SEC ITS-S ENR NB 01 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 02 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 04 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 05 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 06 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 07 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 10 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 11 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 12 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 13 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 16 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 17 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 18 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 20 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 21 


Yes/No 


Yes/No 






TC SEC ITS-S ENR NB 22 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 01 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 02 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 03 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 04 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 05 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 06 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 07 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 08 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 09 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 10 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 11 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 12 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 13 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 14 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 15 


Yes/No 


Yes/No 






TC SEC ITS-S ENR EB 16 


Yes/No 


Yes/No 






TC SEC EA ENR NB 01 


Yes/No 


Yes/No 






TC SEC EA ENR NB 02 


Yes/No 


Yes/No 






TC SEC EA ENR NB 03 


Yes/No 


Yes/No 






TC SEC EA ENR NB 06 


Yes/No 


Yes/No 






TC SEC EA ENR NB 07 


Yes/No 


Yes/No 






TC SEC EA ENR NB 08 


Yes/No 


Yes/No 






TC SEC EA ENR NB 09 


Yes/No 


Yes/No 






TC SEC EA ENR NB 10 


Yes/No 


Yes/No 






TC SEC EA ENR NB 20 


Yes/No 


Yes/No 






TC SEC EA ENR NB 21 


Yes/No 


Yes/No 






TC SEC EA ENR NB 23 


Yes/No 


Yes/No 






TC SEC EA ENR NB 24 


Yes/No 


Yes/No 






TC SEC EA ENR NB 25 


Yes/No 


Yes/No 






TC SEC EA ENR NB 30 


Yes/No 


Yes/No 






TC SEC EA ENR NB 32 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 01 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 02 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 03 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 04 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 05 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 06 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 07 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 08 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 09 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 10 


Yes/No 


Yes/No 
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ATS Reference 


Selected? 


Run? 


Verdict 


Observations 

(Reference to any observations 

made in clause C.7) 


TC SEC ITS-S AUTH NB 11 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 12 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 13 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 14 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 15 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 16 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 17 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 18 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 19 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 20 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH NB 21 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 01 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 02 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 03 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 04 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 05 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 06 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 07 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 08 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 09 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 10 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 11 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 12 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 13 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 14 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 15 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 16 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 17 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 18 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 19 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 20 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 21 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 22 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 23 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 24 


Yes/No 


Yes/No 






TC SEC ITS-S AUTH EB 25 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 01 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 02 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 03 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 04 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 04a 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 04b 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 06 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 05 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 07 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 08 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 09 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 10 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 11 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 12 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 13 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 14 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 15 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 19 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 20 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 21 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 22 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 23 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 24 


Yes/No 


Yes/No 






TC SEC AA AUTH NB 25 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 01 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 02 


Yes/No 


Yes/No 
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ATS Reference 


Selected? 


Run? 


Verdict 


Observations 

(Reference to any observations 

made in clause C.7) 


TC SEC AA AUTH EB 03 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 04 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 05 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 06 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 07 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 08 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 09 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 10 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 11 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 12 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 13 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 14 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 15 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 16 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 17 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 18 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 19 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 20 


Yes/No 


Yes/No 






TC SEC AA AUTH EB 21 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 01 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 02 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 03 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 04 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 05 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 06 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 07 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 08 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 09 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 10 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 11 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 12 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 13 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 14 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 15 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 16 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 17 


Yes/No 


Yes/No 






TC SEC ITS-S S-DATA NB 18 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA NB 01 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA NB 02 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA NB 03 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA NB 04 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA NB 05 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA NB 06 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA NB 07 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA NB 08 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 02 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 03 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 04 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 05 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 06 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 07a 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 07b 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 07c 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 08 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 09 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 10 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 11 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 12 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 13 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 14 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 15 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 16 


Yes/No 


Yes/No 
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ATS Reference 


Selected? 


Run? 


Verdict 


Observations 

(Reference to any observations 

made in clause C.7) 


TC SEC ITS-S R-DATA EB 17 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 18 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 19 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 20 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 21 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 22 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 23 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 24 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 25 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 26 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 27 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 28 


Yes/No 


Yes/No 






TC SEC ITS-S R-DATA EB 29 


Yes/No 


Yes/No 









C.7 Observations 



Additional information relevant to the technical content of the PCTR is given here. 
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